Network Security Archives

Install and Configure OPNsense on Proxmox VE: Multi-VLAN Routing, Zenarmor, and Hardened HomeLab Security

October 18, 2026

Deploy virtualized OPNsense on Proxmox VE using VLAN-aware Linux bridges, strict inter-VLAN firewall rules, and Zenarmor Next-Gen inspection to secure your homelab.

Networking

Deploy Suricata IDS/IPS on Linux: Real-Time Traffic Analysis and Network Defense

October 18, 2026

Deploy Suricata on Linux for real-time intrusion detection and prevention. This guide covers AF_PACKET multi-threading, NFQueue inline packet dropping, custom rules, and production tuning.

HomeLab

Deploy NetAlertX on Docker: Automated HomeLab Network Scanning and Rogue Device Alerts

October 14, 2026

Unmonitored hardware on your LAN creates dangerous security blind spots. Deploy NetAlertX on Docker with host networking to continuously scan your subnets and receive instant alerts when unauthorized devices connect.

Security

Network Security Analysis with Wireshark: Packet Filtering, Port Scan Detection, and Traffic Forensics

October 9, 2026

Learn how to use Wireshark to investigate security incidents and network anomalies. This guide compares packet analysis approaches, highlights essential display filters, and walks through detecting stealth port scans and data exfiltration.

Linux

Mastering Nftables on Linux: Modern Firewall Configuration to Replace Iptables

October 8, 2026

After six months running nftables across 12 production VPS instances, the migration from iptables turned out to be the best firewall decision I've made. This guide covers the real problems with iptables, how nftables solves them, and a practical migration process with a rollback safety net.

Security

Going Dark: How I Used OpenZiti to Close Every Open Port on My Linux Servers

September 7, 2026

Tired of botnets hitting your open ports? Learn how to use OpenZiti to make your Linux services completely invisible to the public internet while maintaining easy access.

Networking

DNS Tunneling with iodine on Linux: Bypass Firewalls and Access Networks via DNS Protocol

August 29, 2026

Learn how to set up DNS tunneling with iodine on Linux to bypass firewalls in restrictive network environments. This guide covers server setup, client connection, traffic routing, NAT configuration, and practical troubleshooting tips for authorized use cases.

Networking

Hardening the Wire: A Practical Guide to Linux MACsec (IEEE 802.1AE)

August 24, 2026

Secure your Linux network at Layer 2. This guide shows you how to configure IEEE 802.1AE (MACsec) to encrypt server-to-server traffic and protect against sniffing and spoofing.

Networking

Building an Automated DDoS Detection and Response System with FastNetMon

July 5, 2026

FastNetMon is a traffic analysis daemon that detects volumetric DDoS attacks in seconds and automatically triggers iptables blocks or BGP blackholing. This guide walks through setting it up on a Linux server with automated response scripts — no cloud scrubbing service required.

Security

Deploying Arkime on Linux: Full Packet Capture for Security Incident Investigation

June 30, 2026

Arkime (formerly Moloch) is the tool that turns a 4-day forensic investigation into a 4-hour one — it stores every packet with searchable metadata so you can reconstruct exactly what happened during a security incident. This guide walks through choosing between full packet capture approaches, the tradeoffs involved, and a complete Arkime deployment on Linux with OpenSearch backend.